Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
File: ypHELfpq-8EeeO6d4ueF-KILUEM.mft (raw, json)
Hash identifier: YrB1sb7ZEIzKZnI3NLWuJHZ5rINGls1CIJuUdERWZ64=
Subject key identifier: AF:DB:2D:F9:5B:E6:41:A1:61:2C:A0:48:F1:51:38:A2:16:9A:7F:2D
Authority key identifier: CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
Certificate issuer: /CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Certificate serial: 0198548DA97388BF237C9FF8A88207437B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
Manifest number: 0CEE
Signing time: Tue 29 Jul 2025 05:00:26 +0000
Manifest this update: Tue 29 Jul 2025 05:00:26 +0000
Manifest next update: Wed 30 Jul 2025 05:00:26 +0000
Files and hashes: 1: PaUzB8wgbbRsaVQjkghBHBx-i68.roa (hash: lFrqYnlO5yM3Jwu/7kIddY95Ktd00GHwSSlGhdD9Z3M=)
2: o-gQar2CMjSO0OGR1JsEy5fR9Ps.roa (hash: I2VZfYqX7cBWwD9BfQYsIfq3N0fck3zT8r6EAvsy5D8=)
3: ypHELfpq-8EeeO6d4ueF-KILUEM.crl (hash: NLo+E7RseZ7+S+Qr1USMZPWpfOBfxBaWr67DVpjMtXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:8d:a9:73:88:bf:23:7c:9f:f8:a8:82:07:43:7b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Validity
Not Before: Jul 29 05:00:26 2025 GMT
Not After : Jul 30 05:00:26 2025 GMT
Subject: CN=afdb2df95be641a1612ca048f15138a2169a7f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:37:0d:23:d3:75:b8:ff:99:6d:2b:66:55:71:
46:19:95:e0:9c:f0:f7:fd:68:d1:c3:d4:75:cc:8f:
04:a3:cc:56:fc:f4:50:84:64:25:56:53:be:68:0d:
17:0b:c0:ed:76:f7:02:63:91:09:20:73:21:4a:aa:
49:5b:a5:b5:6c:6a:98:1f:f2:e8:d4:d3:6f:43:d4:
3a:e1:1e:71:9c:98:eb:2b:8f:7e:ae:23:0a:65:44:
ad:21:2a:62:0a:46:db:0a:87:b6:d3:e2:5a:1d:ba:
28:c2:4d:b2:14:49:fc:df:71:51:d6:3a:1e:38:87:
13:fb:00:3d:19:8f:98:57:31:79:47:0f:65:87:bd:
31:f1:79:86:4b:bc:07:60:5c:23:59:64:2f:9a:95:
3a:05:93:e5:8d:a5:0d:6a:ce:c9:c6:c6:7c:a0:0c:
69:a8:cc:dc:f7:4f:06:44:c8:74:e5:e5:2e:20:34:
5d:70:2b:c7:59:49:38:71:5c:50:8a:10:fb:ab:e0:
fa:6d:cc:d0:99:e6:ca:a2:17:e4:5c:32:92:e3:fc:
10:7e:39:ff:9c:3f:38:78:f9:9e:93:47:b4:8f:9c:
a6:5b:4c:9b:67:78:09:1a:55:bf:55:e6:f8:32:9f:
c9:d6:07:72:fb:6f:79:d4:66:26:e9:b2:69:e7:37:
4d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DB:2D:F9:5B:E6:41:A1:61:2C:A0:48:F1:51:38:A2:16:9A:7F:2D
X509v3 Authority Key Identifier:
keyid:CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d9:82:aa:4b:0c:95:88:f6:75:92:db:0b:63:d7:b6:40:64:
0e:08:32:ac:c9:15:5f:79:da:56:dc:bb:21:16:eb:75:9c:3f:
94:a4:12:59:2a:fe:a2:3e:ad:c9:9e:d1:97:0b:f6:3b:f5:26:
93:2f:12:26:8b:6d:24:7e:7c:a3:59:66:2b:9e:91:78:68:1b:
0b:cc:b3:68:33:a3:d8:48:2a:c0:30:2d:b9:14:52:7c:2f:62:
99:09:4c:df:3f:2d:ae:0c:2e:e8:48:d5:ae:62:ff:56:d5:55:
47:66:4a:73:49:68:12:dc:86:9d:ab:c8:a5:3e:ce:ed:e8:d7:
4d:53:11:f8:7c:eb:e7:29:8b:07:4e:5b:4d:b8:1a:a4:8f:10:
55:d5:bd:39:14:64:50:c1:5e:89:38:4d:af:ff:7a:57:4d:03:
93:55:ce:bf:49:63:11:c1:87:f0:a9:d1:76:92:52:6a:0d:d5:
b8:84:0c:40:0c:02:06:c6:9b:42:8a:05:36:e3:0a:f4:ba:95:
ad:f0:98:58:f9:7a:1d:31:3f:32:de:b0:ec:37:75:2b:d9:1c:
56:ad:20:cd:68:76:8e:35:7a:0c:da:88:c7:7e:d5:9a:9f:83:
56:e4:b5:9b:ad:20:92:7d:14:23:ff:4e:c0:7b:c7:99:8f:33:
29:80:20:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 08:21:08 2025 by rpki-client